# Deployment reference

Use these pages to understand the main configuration areas for an on-premise Ripple Custody deployment. They describe common fields, value relationships, and example configuration shapes.

The examples in this section are illustrative. They show what a deployment values file might look like, but they are not a complete schema or a substitute for the configuration packaged with your release.

For procedures, use the installation and integration guides. For current defaults and the full supported configuration surface, use the values and templates supplied with your release package.

## How to use this section

- Use the parameter tables to understand field names, types, defaults, and possible values.
- Use the examples to see one complete way to arrange related fields.
- Treat sizing, provider choices, resource values, hostnames, and secrets as deployment-specific.
- Avoid copying examples unchanged into a production environment.


## Reference pages

| Area | Configuration section | Use this page to understand | Reference |
|  --- | --- | --- | --- |
| AMQP | `harmonize.externalAmqp`, `harmonize.internalAmqp` | Internal and external message broker fields, protocol options, and secret keys | [AMQP configuration](/products/custody/deployment/reference/amqp) |
| Authentication secrets | Kubernetes secrets for Keycloak and OAuth | Secret formats for Keycloak and OAuth-related authentication material | [Secret management for authentication](/products/custody/deployment/reference/auth-secrets) |
| Blockchain nodes | `harmonize.ledgers` | Node endpoint patterns and how blockchain nodes relate to indexers | [Blockchain nodes configuration](/products/custody/deployment/reference/blockchain-nodes) |
| Common settings | `common`, `harmonize.logging`, `harmonize.resources`, `harmonize.included_components` | Shared image pull, security context, probe, logging, resource, and component-selection fields | [Common configuration](/products/custody/deployment/reference/common) |
| Gas Station | `gasStation` | Gas Station service fields and supporting database, health, and telemetry settings | [Gas Station reference](/products/custody/deployment/reference/gas-station) |
| Genesis | `harmonize.genesis.value` | Genesis payload fields used to supply initial governance data during deployment | [Genesis payload reference](/products/custody/governance/genesis/payload-reference) |
| Indexers | `harmonize.ledgers`, `indexers.*` | Chain-specific indexer configuration and ledger field patterns | [Indexers configuration](/products/custody/deployment/reference/indexers) |
| Keycloak | `harmonize.keycloak`, `components.keycloak` | Keycloak service settings, database schema, resources, and admin credential references | [Keycloak configuration](/products/custody/deployment/reference/keycloak) |
| Notary | `harmonize.notary`, `components.notary` | Notary protocol, deployment, KMS platform, and Notary-to-Vault relationship fields | [Notary configuration](/products/custody/deployment/reference/kms-notary) |
| Vault | `vault`, `harmonize.vaults` | Vault service, vault instance, KMS platform, and Notary public key fields | [Vault configuration](/products/custody/deployment/reference/kms-vault) |
| Ledgers | `harmonize.ledgers` | Ledger identifiers, network types, and node connection fields | [Ledgers configuration](/products/custody/deployment/reference/ledgers) |
| MPC | `harmonize.vaults.<vault-id>.kms_mpc`, `harmonize.mpc` | MPC-related Vault fields, threshold values, and network requirements | [MPC configuration](/products/custody/deployment/reference/mpc-configuration) |
| Networking | `harmonize.certificates`, `harmonize.httpProxy`, `components.<component>.ingress` | Certificate, proxy, ingress, and TLS-related fields | [Networking configuration](/products/custody/deployment/reference/networking) |
| Notifications | `harmonize.notifications.email`, `components.notification` | Email, webhook, notification server, and notification worker settings | [Notifications configuration](/products/custody/deployment/reference/notifications) |
| OAuth server | `components.oauth` | OAuth service resources, environment variables, private key handling, and flow settings | [OAuth server configuration](/products/custody/deployment/reference/oauth-server) |
| Omnibus | `omnibus` | Omnibus service fields and supporting database, workflow, Accounting Service, system-signed automation, and telemetry settings | [Omnibus reference](/products/custody/deployment/reference/omnibus) |
| PostgreSQL | `harmonize.postgresql`, `postgresql` | External database connection fields, SSL modes, and schema requirements | [PostgreSQL configuration](/products/custody/deployment/reference/postgresql) |
| Repository | `harmonize.repository` | Container repository and image pull secret fields | [Repository configuration](/products/custody/deployment/reference/repository) |
| System-signed intents | `silo.gateway.system-signed-intents`, `systemSignedIntents` | Gateway signing, system signing key, runtime enablement, and policy-origin fields | [System-signed intent configuration](/products/custody/deployment/reference/system-signed-intents) |
| Telemetry | `harmonize.telemetry`, `opentelemetry-collector` | OTEL, syslog, metrics, and collector configuration | [Telemetry configuration](/products/custody/deployment/reference/telemetry-configuration) |
| URLs | `harmonize.urls` | Base service URL and subdomain fields | [URL configuration](/products/custody/deployment/reference/urls) |


## Related topics

- [Deployment overview](/products/custody/deployment/overview)
- [Installation and initialization](/products/custody/deployment/install/first-time-installation)
- [Genesis](/products/custody/governance/genesis)